Vmware vSphere Management Assistant (vMA) Privilege Escalation

======================================================================= Vmware vSphere Management Assistant vMA - Local Privilege Escalation ======================================================================= Affected Software : Vmware vSphere Management Assistant vMA Severity : Medium...

Postfix SMTP Server Cyrus SASL支持内存破坏漏洞

BUGTRAQ ID: 47778 CVE ID: CVE-2011-1720 Postfix是Unix类操作系统中所使用的邮件传输代理。 Postfix SMTP Server在实现上存在Cyrus SASL支持内存破坏漏洞，在启用了Cyrus SASL支持时可影响SMTP服务器，远程攻击者可利用此漏洞执行任意代码或造成拒绝服务。 启用了SASL验证时，Postfix SMTP Server为每个SMTP会话创建了一个SASL句柄，在关闭SMTP连接前会一直使用此句柄。根据Cyrus SASL include源文件的注释，服务器在客户端验证失败后不应重新使用Cyrus...

ZDI-11-165: HP 3COM/H3C Intelligent Management Center tftpserver opcode_table Remote Code Execution Vulnerability

ZDI-11-165: HP 3COM/H3C Intelligent Management Center tftpserver opcodetable Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-165 May 10, 2011 -- CVE ID: CVE-2011-1853 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected...

ZDI-11-156: Sybase M-Business Anywhere agd.exe username Parameter Remote Code Execution Vulnerability

ZDI-11-156: Sybase M-Business Anywhere agd.exe username Parameter Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-156 May 9, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Sybase -- Affected Products: Sybase MBusiness Anywhere --...

Imperva SecureSphere SQL Injection Filter Bypass

======================================================================= Imperva SecureSphere - SQL injection filter bypass ======================================================================= Affected Software : SecureSphere Web Application Firewall WAF Severity : High Local/Remote : Remote...

ZDI-11-127: CA Total Defense Suite UNCWS Web Service getDBConfigSettings Credential Disclosure Vulnerability

ZDI-11-127: CA Total Defense Suite UNCWS Web Service getDBConfigSettings Credential Disclosure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-127 April 13, 2011 -- CVE ID: CVE-2011-1655 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: CA -- Affected Products: CA Tota...

Microsoft Office共享组件DLL加载任意代码执行漏洞(MS11-023)

BUGTRAQ ID: 47246 CVE ID: CVE-2011-0107 Microsoft Office是一套由微软公司开发的办公软件，它为Microsoft Windows和Apple Macintosh操作系统而开发。 Microsoft Office在实现上存在共享组件DLL加载任意代码执行，远程攻击者可利用此漏洞以当前用户权限执行任意代码。 Microsoft...

Linux Kernel “sound/oss/midi_synth.c”内存破坏漏洞

BUGTRAQ ID: 47007 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel “sound/oss/midisynth.c”在实现上存在内存破坏漏洞，本地攻击者可利用此漏洞造成内存破坏，在非x86架构上，可允许攻击者运行任意代码，造成拒绝服务。此漏洞亦可影响OSS子系统。 传递到midisynthloadpatch的偏移可以是任意的，如果大于标头值，会造成copyfromuserdst, src,...

AOL Desktop .rtx File Buffer Overflow

Added: 03/18/2011 BID: 46129 OSVDB: 70741 Background AOL Desktop is an internet suite that integrates a web browser, media player, and IM client. Problem A heap overflow vulnerability exists in the Rich Text file parser of AOL Desktop 9.x. In documents with HTML links, the parser does not properl...

Microsoft Windows Picture and Fax Viewer Library Vulnerability !

Microsoft Windows Picture and Fax Viewer Library Vulnerability ! I. BACKGROUND The Windows Picture and Fax Viewer "shimgvw.dll" library is used by Windows Explorer to generate thumbnail previews for media files. II. DESCRIPTION Remote exploitation of a buffer overflow vulnerability in multiple...

Quick Poll Local File Include and Arbitrary File Deletion Vulnerabilities

Quick Poll is prone to a local file-include vulnerability and an arbitrary-file- deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

Quick Polls Local File Inclusion and Deletion Vulnerabilities

Exploit for php platform in category web applications 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & loc...

ZDI-11-097: Apple Webkit setOuterText Memory Corruption Remote Code Execution Vulnerability

ZDI-11-097: Apple Webkit setOuterText Memory Corruption Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-097 March 2, 2011 -- CVE ID: CVE-2011-0116 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple WebKit --...

Linux Kernel "fs/partitions/ldm.c"缓冲区溢出和拒绝服务漏洞

BUGTRAQ ID: 46512 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"fs/partitions/ldm.c"在实现上存在缓冲区溢出和拒绝服务漏洞，攻击者可利用此漏洞执行任意代码、提升权限、泄露敏感信息和造成拒绝服务。 不管是否启用了自动分区，Kernel自动评估存储设备分区表。评估MAC和LDM分区表的代码包含下列漏洞： 1、fs/partitions/mac.c中的macpartition存在缓冲区溢出漏洞导致通过破坏的MAC分区表造成拒绝服务。...

AIX 530011 : U840331

The remote host is missing AIX PTF U840331 which is related to the security of the package devices.usbif.08025002.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 530011 : U840352

The remote host is missing AIX PTF U840352 which is related to the security of the package devices.pci.1410bd02.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-090 February 18, 2011 -- CVE ID: CVE-2010-4227 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Netware --...

jSchool Advanced SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

jSchool Advanced - SQL Injection

jSchool Advanced - SQL Injection ----------------------------------------------------------------------- Exploit Title : jSchool Advanced SQL Injection Vulnerability Dork : inurl: "action=profil.main" Found : 15 Jan '11 Author : eXa.DisC Software : jSchool Advanced...

ZDI-11-054: Hewlett-Packard Data Protector Client EXEC_CMD omni_chk_ds.sh Remote Code Execution Vulnerability

ZDI-11-054: Hewlett-Packard Data Protector Client EXECCMD omnichkds.sh Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-054 February 7, 2011 - This vulnerability is being disclosed publicly without a patch in accordance with the ZDI 180 day deadline. To view...